Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D2500ACC1D011EF862EE184762E951A.roa
File: 7D2500ACC1D011EF862EE184762E951A.roa (raw, json)
Hash identifier: k/SBw3ZbnRXJlqcaZqbEa/p7HPTBronHDx6Rumy98Tw=
Subject key identifier: A2:1A:9A:CD:52:AF:EC:75:03:FF:CA:A2:BB:89:FD:67:38:79:69:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01229B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D2500ACC1D011EF862EE184762E951A.roa
Signing time: Tue 24 Dec 2024 08:24:27 +0000
ROA not before: Tue 24 Dec 2024 08:24:23 +0000
ROA not after: Wed 10 Dec 2025 08:24:23 +0000
asID: 984
IP address blocks: 154.193.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74395 (0x1229b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:24:23 2024 GMT
Not After : Dec 10 08:24:23 2025 GMT
Subject: CN=676a6fbb-92e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:0c:ec:5a:23:b3:60:c3:23:f8:2f:ce:c0:
85:9b:5d:76:4c:2c:36:12:f9:b0:8d:5c:73:bc:55:
3f:e5:44:12:b1:54:bb:05:cb:b4:6c:73:9a:d6:f9:
3d:1d:8e:2d:a9:e7:48:f3:36:28:f1:c9:05:77:ac:
11:ec:8c:c1:9d:8a:c7:77:c5:54:63:d9:68:b8:e0:
98:12:65:4b:4c:6b:b6:e7:7d:3a:99:9f:58:82:54:
ce:ba:fa:9b:28:d8:e6:49:fd:0c:1a:53:d1:b2:a4:
3f:84:9e:6c:e3:70:c9:99:0e:0c:59:9d:8d:9d:4b:
9c:98:14:a8:f5:eb:b6:ce:b1:63:74:d6:6c:53:0c:
91:9c:84:4e:c7:98:5f:58:41:d8:5e:77:e7:32:fa:
b6:50:4c:2a:92:7f:e8:87:4a:8e:52:8f:e4:14:99:
10:62:82:1a:8e:0f:5e:0c:8b:8b:0f:b9:f3:75:10:
40:3b:37:ff:30:e1:96:2f:60:45:67:33:ed:e6:fb:
70:98:4a:a1:61:4f:55:4e:62:a3:fb:31:b0:ae:b4:
3a:33:79:49:f1:9f:57:bd:8e:b9:0d:3d:44:13:77:
e2:e1:e3:2c:8c:38:49:3a:cf:1b:fb:dc:4b:31:29:
21:36:89:0a:71:4c:c0:95:87:c2:ad:78:9f:95:2f:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:9A:CD:52:AF:EC:75:03:FF:CA:A2:BB:89:FD:67:38:79:69:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D2500ACC1D011EF862EE184762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.237.0/24
Signature Algorithm: sha256WithRSAEncryption
71:6f:07:68:57:e6:54:53:0d:54:7f:b2:45:b7:87:00:d6:c0:
ab:2d:28:fd:43:5e:15:f1:7c:bc:d5:27:df:7d:62:56:50:bd:
12:02:02:85:41:54:79:ac:d5:e6:c0:2f:48:c4:d2:92:16:ee:
e3:8d:0c:c0:6b:d6:a7:bb:d9:1e:34:2e:ee:6c:fc:19:d4:40:
50:fa:d2:7a:b0:f1:25:71:5f:65:7a:29:3c:1c:a1:98:a8:28:
0a:e8:a2:e2:d5:cc:f5:8e:25:ac:ec:07:98:75:6c:3e:11:38:
20:f0:ea:53:e8:69:80:17:97:63:db:64:67:c2:5c:82:ed:40:
d0:f5:b6:4a:fd:a2:09:85:3c:08:69:2b:d6:e8:90:51:38:8c:
35:59:2b:7f:9e:d7:ef:38:d1:a3:34:40:23:d7:dc:cc:2c:74:
2d:08:ab:4c:cb:ab:72:b0:58:5e:04:89:7a:83:94:c2:c0:23:
4d:03:b9:7c:3d:7a:a0:a7:18:80:1e:51:84:26:84:34:90:c9:
a3:3b:1d:c9:05:09:55:4d:50:4c:9d:2a:92:17:f2:2f:aa:1a:
7b:4c:e3:41:ab:fb:62:43:79:0e:28:e9:3c:65:c8:c5:3e:91:
3b:df:1e:8a:5a:93:d8:bc:13:2a:fb:cc:9d:f9:c0:8e:a7:91:
a6:c2:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:25 2025 by rpki-client